Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 12

Chia sẻ: Nothing Nothing | Ngày: | Loại File: PPT | Số trang:10

Thêm vào BST

Báo xấu

47
lượt xem 3
download

Download Vui lòng tải xuống để xem tài liệu đầy đủ

Module 12: Implementing ISA Server 2004 enterprise edition: back-to-back firewall scenario. The primary focus of this module is the lab where the students will implement ISA Server Enterprise Edition in a back-to-back firewall configuration that includes network load balancing and shared caching. The module information will introduce the complexities of implementing a back-to-back firewall configuration and then provide guidelines for deploying this configuration. In the lab, the students will implement and test a back-to-back firewall scenario.

Chủ đề:

Bình luận(0) Đăng nhập để gửi bình luận!

Lưu

Nội dung Text: Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 12

Module 12: Implementing ISA Server 2004 Enterprise Edition: Back-to-Back Firewall Scenario
Overview Implementing a Back-to-Back Firewall Scenario Lab: Implementing a Back-to-Back Firewall Scenario
Lesson: Implementing a Back-to-Back Firewall Scenario Issues in Deploying a Back-to-Back Firewall Solution Guidelines for Configuring ISA Servers in a Workgroup Guidelines for Implementing Network Load Balancing Guidelines for Configuring a Front-End Firewall Array Guidelines for Configuring a Back-End Firewall Array
Issues in Deploying a Back-to-Back Firewall Solution Issues in deploying a back-to-back firewall configuration Using public include: or private IP addresses in the perimeter network Deploying the ISA Server computers in a domain or workgroup Configuring network load balancing Configuring name resolution and network routing Configuring access to Configuration Storage servers Configuring configure publishing rules and access rules Configuring SSL connections Configuring user authentication
Guidelines for Configuring ISA Servers in a Workgroup ISA Server Enterprise Edition supports the following deployment scenarios: Deploying all ISA Server components on domain members Deploying all ISA Server components on workgroup members Deploying ISA Server components in a mixed configuration You can change the deployment configuration after deployment
Guidelines for Implementing Network Load Balancing Configuring intra-array addressing: Used by array members to communicate with other array members If not enabling NLB, use the internal network for the intra-array network If enabling NLB, create a separate IP address or a separate network for the intra- array addresses When configuring network load balancing: Do not use a layer-2 switch to connect array members If all networks are enabled for NLB, add an additional network adapter and create a separate network for intra-array traffic
Guidelines for Configuring a Front-End Firewall Array When configuring a back-to-back firewall, begin by defining the Internal and External networks for both arrays OnNetwork the front-end routing firewall array, you need to configure: The Internal network IP addresses The network relationship Access to resources on the perimeter network Access to resources on the Internal network SSL publishing for perimeter network servers SSL publishing for Internal network servers Authentication
Guidelines for Configuring a Back-End Firewall Array OnThe a back-end firewall array, you need to internal network IP addresses configure: Network routing The perimeter network on the internal array Network objects Access to perimeter network resources Access for front-end ISA Server computers Access to resources on the Internal network Internal network access for domain members
Practice: Planning a Back-to-Back Firewall Deployment In this practice, you will analyze a scenario describing an organization’s requirements for deploying a back-to-back firewall solution and plan the front-end array and back-end array configuration
Lab 12: Implementing a Back-to-Back Firewall Scenario Den-DC-01 Den-ISA-01 Exercise 1: Enabling Gen-Web-01 Network Den-ISA-03 Load Balancing for the Main\Front-End Array ExerciseDen-Web-01 2: Installing and Den-CSS-01 Configuring the Front-EndInternet Array Server Exercise 3: Configuring Den-ISA-02 Den-Msg-01 Firewall Rules for Resource Access Den-ISAEE-01 Den-DC-01 Den-CSS-01 Den-ISAEE-02 Den-Msg-01 Den-ISAEE-03 Den-Web-01 Gen-Web-01 Host1 Host2